Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/DQPkSnAugHRIpvXFSWCUKNNva8k.roa
File: DQPkSnAugHRIpvXFSWCUKNNva8k.roa (raw, json)
Hash identifier: /Zlbs6bOJIKPJ3PK0B/nICsi+Kuuh1rntkFLneQUeoc=
Subject key identifier: 0D:03:E4:4A:70:2E:80:74:48:A6:F5:C5:49:60:94:28:D3:6F:6B:C9
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018CC94E6ADCCC4EEA47EC721FDB8B6FB914
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/DQPkSnAugHRIpvXFSWCUKNNva8k.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.150.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6a:dc:cc:4e:ea:47:ec:72:1f:db:8b:6f:b9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d03e44a702e807448a6f5c549609428d36f6bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b9:6f:b0:f1:b3:4b:c2:29:05:c8:2b:de:8c:
e5:f5:63:9a:99:3b:28:38:2e:bd:5f:2a:0b:f8:bc:
9a:3e:7d:9d:b2:d2:13:d1:e5:3a:d3:37:72:16:b7:
9b:57:ef:52:5b:d8:74:de:40:6a:2f:d6:f8:fc:bd:
2d:5b:9a:63:22:72:7b:08:30:e5:a5:b4:e8:16:ef:
3f:6e:36:20:48:f0:28:56:8d:df:c2:e9:44:31:27:
eb:34:83:e8:b5:59:aa:f9:4a:f1:b7:db:fd:b3:ca:
8d:c0:5c:bc:05:c2:23:9d:36:ac:65:3c:73:60:1c:
2f:3e:60:c1:6b:8f:26:a3:48:3b:66:9c:c8:b2:db:
f3:81:f4:87:80:24:30:14:94:ce:ac:5b:fd:9f:fc:
78:7d:73:50:f2:68:26:2e:d7:80:09:a0:0d:e8:f2:
8e:f5:29:c6:cb:a6:dc:4b:c0:69:4c:ce:c5:74:c6:
48:6f:60:b1:c5:9f:8b:e6:4a:bb:bf:39:91:b5:ed:
38:c0:70:a2:f9:ea:8c:4d:0a:4b:0f:2c:01:87:58:
68:d6:f6:7f:75:da:38:ed:51:0e:51:67:ae:5c:05:
ca:9f:0e:d6:16:2b:e8:97:d6:d7:31:34:d8:17:ba:
4b:96:e9:a8:0f:8b:c3:36:cd:7f:71:46:c7:cb:f5:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:E4:4A:70:2E:80:74:48:A6:F5:C5:49:60:94:28:D3:6F:6B:C9
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/DQPkSnAugHRIpvXFSWCUKNNva8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:79:f8:fa:0e:68:27:e8:e2:f9:70:fd:fe:7f:7d:6e:d0:75:
1c:30:ad:82:e3:6d:5f:b8:af:67:42:00:77:33:ea:2c:58:1e:
a8:a9:68:7f:43:a7:49:fe:c1:50:bc:c2:a4:9e:93:3c:4e:71:
cf:a8:cd:d2:be:4d:e5:fe:2b:a5:b8:0d:a9:6a:57:71:ae:ab:
a6:76:f7:22:f6:ec:4d:80:d1:dd:25:69:cd:f6:4a:17:7c:9d:
26:ba:f5:bc:3c:57:fc:a7:37:31:ff:75:d7:17:d3:4d:28:0f:
79:0d:39:b2:c6:7e:14:bb:94:19:bb:49:91:a0:56:80:4a:5f:
6d:19:68:37:a1:bc:de:93:ed:fd:93:da:c5:08:0c:6f:ee:07:
0b:b8:3a:e3:fb:5b:93:e3:12:30:cd:14:58:bd:20:69:cb:bd:
da:da:27:43:b1:bc:92:78:22:89:15:df:e8:80:7d:ac:a8:ed:
35:eb:cb:cf:c0:97:fc:bf:8c:ce:06:de:9e:28:1e:9a:01:22:
6c:eb:5f:0e:9c:19:13:98:e6:61:e9:34:c5:8e:a7:7b:0b:6d:
dc:13:a6:a2:37:ee:b8:24:21:90:f5:b3:41:e6:09:07:14:6b:
cb:ea:5c:f9:46:a5:dd:00:52:f3:8c:21:42:f8:29:21:b5:b5:
2b:38:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:14:54 2025 by rpki-client